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R.  E.  Barlow  and  S.  Iyer 


Abstract 

J  - 

There  are  three  general  methods  for  system  reliability  evaluation, 

namely:  1)  Inclusion-Exclusion,  2)  Sum  of  Disjoint  Products,  and 

3)  Pivoting.  Of  these,  only  pivoting  can  be  applied  directly  to  a 

logic  tree  or  network  graph  representation  without  first  finding 

minimal  path  (or  cut)  sets.  Domination  theory  provides  the  basis  for 

selecting  optimal  pivoting  strategies.  Simple  proofs  of  domination 

theory  results  for  coherent  systems  are  given,  based  on  the 

reliability  polynomial.  These  results  are  related  to  the  problem  of 

finding  efficient  strategies  for  computing  coherent  system  reliability. 

The  original  results  for  undirected  networks  are  due  to  Satyanarayana 

and  Chang  (1983).  Many  of  the  original  set  theoretic  results  are  due 

to  Huseby  (1984).  However,  he  does  not  use  the  reliability  polynomial 


to  prove  his  results.  y  • 


yy v*.-  /  'J.'a 


1.  INTRODUCTION 


Let  C  *  {l,2,...,n>  be  a  set  of  components  and  P  *  [p.j,...,Pm] 
be  a  family  of  min  path  sets  where  P^  C  C,  P^  P^  for  i  f  j  and 


i=iPr  Let 


0(s)  - 


1  If  Pj  c  s  for  some  1 
0  otherwise. 


(1.1) 


1 


0  is  a  monotonic  set  function  which  is  one  for  any  min  path  set  and 
any  superset  of  min  path  sets. 

DEFINITION.  (C,P,0)  is  a  coherent  system.  (Abbreviated  [C,P]) 

DEFINITION.  The  reliability  polynomial  for  (C,P,0)  is 

h0(p)  *  I  0(S)p|sl(l-p)n'|s| 

v  sa 

or  h0(p)  =  J^p1  (1. 

where  |S|  is  the  cardinality  of  set  S. 

N.B.  This  polynomial  is  relevant  to  (C,P,0)  regardless  of  the 
probability  measure  assigned  to  components  of  C!  The  coefficients 
of  the  reliability  polynomial  provide  useful  information  about  the 
system.  If  components  operate  Independently  of  one  another  with 
probability  p,  then  (1.2)  is  system  reliability. 

DEFINITION.  A  formation  for  C  is  a  set  of  min  paths  whose  union 
is  C.  It  is  odd  (even)  if  the  number  of  min  paths  is  odd  (even). 

EXAMPLE.  The  following  simple  example  of  an  undirected  network  will 
be  used  to  illustrate  ideas. 


Figure  1 

Undirected  Two  Terminal  Network 


For  this  example  C  =  {l,2,3,4,e}  while  P  =  [{1 ,3}, {1,2, 4}, 
{e,4},{e,2,3}].  The  formations  of  C  are: 

Fq  =  P  =  [{1 ,3},{1 ,2,4},{e,4},{e,2,3}] 

F1  =  [{1 ,3},{1 ,2,4},{e,2,3}] 

F2  =  [{1 ,3} , (1 ,2,4}, {e, 4}] 

F3  =  [{1 ,3},{e,4},{e,2,3}] 

F4  =  [{1,2,4}, {e,2, 3}] 

F5  =  [{1 ,2,4},{e,4},{e,2,3}] 

The  reliability  polynomial  for  this  example  is 

h0(p)  =  2p2+2p3-5p4  +  2p5  . 

Notice  that  the  coefficients  always  sum  to  1  since  1^(1)  =  1. 

This  is  a  convenient  check  on  numerical  calculations. 

By  the  inclusion-exclusion  formula,  the  coefficient  of  pn  is 
the  number  of  odd  formations  of  C  minus  the  number  of  even  formations 
of  C.  In  our  example  there  are  4  odd  formations  and  2  even  formations 
so  that  the  coefficient  of  pn  is  2. 

DEFINITION.  The  Signed  Domination,  d(P),  of  (C,P,(J)  is  the  number 
of  odd  formations  of  C  minus  the  number  of  even  formations  of  C. 

For  coherent  systems  the  signed  domination  is  the  same  as  the 
coefficient  of  pn.  For  non-monotonic  systems  (e.g.  logic  trees 
with  NOT  gates),  the  coefficient  of  pn  cannot  be  Interpreted  in 
terms  of  formations. 

DEFINITION.  The  domination,  D{P),  of  (C,P,0)  is  |d(P)|. 


DEFINITION.  The  dual  system  to  (C,P,(J)  is  (C,K,0  )  where 
K  =  [Kp...,Kk]  are  the  corresponding  min  cuts  and 

A  1  if  K.  c  s  for  some  i 

0d(S)  =  ■  1  - 

0  otherwise. 

The  reliability  polynomial  for  (C,K,0^)  is 

hjj(p)  -  l-h0(l-p> 

so  that  the  signed  domination  of  the  dual  system  satisfies 

d(K)  =  (-l)n+1d(P)  .  (1.3 

It  follows  that  for  coherent  systems 

D(P)  =  D(K)  . 

EXAMPLE.  For  a  series  system  h(p)  *  pn  and  the  signed  domination 
is  1.  For  its  dual  (a  parallel  system)  the  signed  domination  is 
(-l)n+1.  However,  both  have  domination  1. 

2.  PIVOTING 

A  general  method  useful  for  computing  system  reliability  is  to 
pivot  on  a  component,  say  e.  Let  p  =  (pj(...,p  )  be  the  vector  of 
component  reliabilities  and  assume  components  fail  independently  of 
one  another.  Let  h(p)  be  the  coherent  system  reliability.  Then  if 
we  pivot  on  component  e,  we  will  have 

h(p)  =  peh(le,p)  +  (l-pe)h(0e,p) 

where  ( lg ,p)  =  (p-j ,. . . ,le>. . . ,pn) ,  etc.  The  systems  corresponding 


to  h( le.p)  and  h(Og,p)  are  called  the  minors  of  [C,P]  with 
respect  to  e.  The  minor  [C-e,P+g]  corresponds  to  the  system  with 
e  perfect  while  the  minor  [C-e,P_g]  corresponds  to  the  system  with 
e  failed.  P_g  are  the  min  paths  of  P  not  containing  e  while 
P+e  is  obtained  by  deleting  e  from  all  min  paths  of  P  and  then 
discarding  any  supersets  which  may  now  be  present.  We  illustrate  the 
procedure  using  our  previous  example. 


P 


Figure  2 
Pivoting  on  e 

Note  that  we  pivoted  once  and  the  number  of  leaves  is  equal  to  the  domination 

In  this  example  P^  *  [U  ,3},{4},{2,3}] 

and  P_e  *  [{1,3}, {1,2,4}]  . 

In  P  ,  {1,2,4}  was  a  superset  of  {4}  and  was  eliminated. 


THEOREM  2.1  (The  Signed  Domination  Theorem).  For  all  coherent  systems 


d(P)  =  d(P+e)  -d(P_e)  .  (2.1) 

Proof.  By  pivotal  decomposition  (true  for  all  systems)  the 
reliability  polynomial  for  (C,P,0)  can  be  written  as 

h0(p)  =  PhflOe’P)  +  O-p)h0(°e,p)  • 

Equating  coefficients  of  pn  on  both  sides  of  the  equation,  we  have 
that  the  coefficient  of  pn  equals  the  coefficient  of  pn_^  in 

n  1 

hgOe.p)  minus  the  coefficient  of  p  in  h0(Oe,p).  The  result  is 
not  true  for  non-monotonic  systems  since  the  coefficient  of  pn  does 
not  correspond  to  the  signed  domination  in  this  case.  Q.E.D. 

Using  Theorem  2.1  and  induction,  it  is  easy  to  verify  the  following 
corollary  for  undi rected  networks.  An  undirected  network  with  |K| 
distinguished  nodes  works  iff  all  nodes  in  K  can  communicate  with 
each  other. 

COROLLARY.  For  a  coherent  system  corresponding  to  an  undirected 
network  with  v  nodes  and  |K|  <  v  distinguished  nodes 

d(P)  =  (-1 )n-v+1 D(P)  , 

where  D(P)  =  |d(P)|  is  the  domination  and  n  is  the  number  of  edges. 

DEFINITION.  A  coherent  system  (C,P,0)  will  be  called  total 1y 
amenable  iff  for  all  components  e, 

D(P)  =  D(P+e)  +  D(P_e)  (2.2) 

and  all  minors  of  minors  also  satisfy  (2.2). 
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THEOREM  2.2.  Undirected  networks  with  |K|  distinguished  nodes  and 
k-out-of-n  systems  are  totally  amenable;  i.e.  (2.2)  holds. 

Proof.  Use  Theorem  2.1  and  its  Corollary  relative  to  undirected 
networks  with  |K|  distinguished  nodes.  Use  Theorem  2.1  and  induction 
relative  to  k-out-of-n  systems.  Q.E.D. 

Huseby  (1984)  defines  a  class  of  coherent  systems  which  he  calls 
regular  and  which  includes  undirected  networks,  k-out-of-n  systems  and 
others.  Regular  coherent  systems  are  totally  amenable.  Lehman  (1964) 
provides  an  algorithm  based  on  min  paths  to  determine  whether  or  not  a 
system  is  regular.  It  is  not  known  at  this  time  if  the  class  of  regular 
coherent  systems  is  equivalent  to  the  class  of  totally  aivienable 
coherent  systems. 

3.  COMPUTATIONAL  COMPLEXITY  OF  TOTALLY  AMENABLE  COHERENT  SYSTEMS 

In  considering  a  strategy  for  computing  system  reliability, 
usually  the  first  idea  is  to  discover  modules,  compute  their 
reliability  and  then  replace  each  module  in  the  original  system  by  a 
super  component  with  that  module's  reliability.  Although  clearly 
prudent,  we  seek  some  way  of  measuring  the  advantage  of  this  approach 
in  conjunction  with  pivoting.  This  can  be  done  for  totally  amenable 
systems  using  domination  theory. 

MODULES  OF  COHERENT  SYSTEMS.  Let  x..  =  1  if  component  i  works, 
x..  =  0  otherwise  and  x  =  (xj,...,xn).  Then,  with  a  slight  abuse  of 
notation,  we  define  0(x)  =  1  if  the  set,  S,  of  indices  corresponding 
to  coordinates  which  are  1  contains  a  min  path  set  and  0  otherwise. 
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Let  Xj.  j  =  1 


,r  be  corresponding  indicators  for  modules  of 


(C,P,0).  Let  $  be  the  module  organizing  structure  function  such  that 

0(x)  =  4>[x-|(x),...  ,xr(x)]  . 

Modules  are  coherent  sub-systems.  Their  components  do  not  overlap. 

THEOREM  3.1.  The  domination  of  (C,P,0)  corresponding  to  the  modular 
decomposition 

0(x)  =  sEx^x) . xr(x)] 

satisfies 

D(0)  =  D($)  n  D(XJ  (3.1) 

j=l  3 

where  D(0)  =  D(P),  again  by  an  abuse  of  notation. 

Proof.  The  reliability  polynomial  of  0  can  be  written  in  terms 
of  that  of  $  and  of  the  x,-»  j  =  l,...,r  as  follows 

J 

^rt(p)  ~  (p)  » •  •  *  »h  (p)]  • 

*1  xr 

The  coefficient  of  pn  on  the  left  hand  side  is  equal  to  the  coefficient 
of  pr  corresponding  to  h^,  since  4>  has  r  supercomponents,  times 
the  product  of  the  coefficients  of  pnJ  corresponding  to  each  of  the 
modules  where  module  j  has  n.  components.  Q.E.D. 

J 

Clearly  if  each  module  is  either  series  or  parallel  and  the 


organizing  structure  function  is  either  series  or  parallel  then  the 
domination  of  the  system  is  1. 
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DEFINITION.  For  a  coherent  system,  components  i  and  j  are  in  series 
(parallel)  if  whenever  i  is  in  a  min  path  (min  cut)  so  is  j  and 
vice  versa. 

DEFINITION.  A  series  (parallel)  replacement  consists  of  replacing  a 
series  (parallel)  system  by  a  "supercomponent"  with  the  same  reliability. 

COROLLARY  3.2.  The  domination  of  a  coherent  system  is  invariant  under 
series  and  parallel  replacements. 

Proof.  If  X]»X2»-**»Xr  correspond  to  series  and/or  parallel 
modules,  then  by  (3.1) 

D(0)  =  D($) 

where  $  is  the  organizing  structure  function.  Hence  the  domination 
of  the  modified  system  is  the  same  as  that  of  the  original  system.  Q.E.D. 

DEFINITION.  A  coherent  system  is  series-parallel  iff  it  can  be  reduced 
to  a  single  component  by  series  and  parallel  replacements  alone. 

DEFINITION.  A  coherent  system  is  series-parallel  complex  (s-p  complex) 
iff  it  has  no  components  in  series  or  in  parallel. 

THEOREM  3.3.  A  totally  amenable  coherent  system  is  series-parallel 
iff  its  domination  is  1. 

Proof.  Suppose  (C,P,0)  is  totally  amenable  and  D(P)  =  1. 

Then  by  (2.2),  for  any  e  e  C 


D(P)  =  D(P ,  )  +  D(P  J  =  1 


which  implies  that  either  D(P+e)  =  1  and  D(P_e)  =  0  or  vice  versa. 

Suppose  D(P  )  =  0,  then  u  P  =  C-e  meaning  that  the  min  paths 

-e 

in  P  do  not  contain  e  and  at  least  one  other  component,  say  j. 
Hence  e  and  j  were  in  series  in  the  original  system  and  a  series 
replacement  is  possible  for  the  original  system.  By  a  similar 
argument,  if  D(P+e)  =  0,  then  e  is  in  parallel  with  another 
component  in  the  original  system  and  a  parallel  replacement  is  possible. 
Continuing  in  this  way  we  see  that  (C,P,0)  can  be  reduced  to  a  single 
component  by  series  and  parallel  replacements.  Q.E.D. 

Note  that  the  simple  example  on  page  2  is  totally  amenable, 
s-p  complex  and  its  domination  is  2. 

Huseby  (1984)  proves  that  for  every  coherent  system  which  is 
s-p  complex,  there  exists  a  component  e  such  that  both  minors 
[C,P  ]  and  [C,P_e]  are  coherent.  The  only  way  they  could  fail  to 
be  coherent  would  be  if  one  or  the  other  contained  an  irrelevant 
component.  If  a  system  contains  an  irrelevant  component,  its  domination 
is  zero  since  it  has  no  formations  in  terms  of  minimal  paths.  Of 
course,  coherent  systems  have  no  irrelevant  components.  However,  a 
coherent  system  can  still  have  domination  zero.  For  example,  the 
domination  is  0  for  directed  cyclic  networks. 

THEOREM  3.4.  If  a  s-p  complex,  coherent  system  (C,P,0)  is  totally 
amenable,  then  D(P)  >  1. 

Proof.  The  proof  is  by  induction  on  the  number,  n,  of  components 
It  is  easy  to  verify  that  all  coherent  systems  of  orders  2  and  3  are 
totally  amenable  and  their  dominations  are  positive.  Suppose  all 


coherent,  totally  amenable  systems  of  orders  less  than  or  equal  to  n-1 
have  positive  domination.  Let  [C,P]  be  a  s-p  complex,  coherent 
system  which  is  totally  amenable.  Huseby  (1984)  proved  that  there 
exists  e  such  that  both  [C-e,P+g]  and  [C-e,P_g]  are  coherent. 

Since  [C.P]  is  totally  amenable,  so  are  the  minors  and 

D(P)  =  D(P+e)+D(P+e) 

by  (2.2).  By  the  induction  assumption  D(P+e)  >  0  and  D(P_g)  >  0 
imply  D(P)  >  1.  Q.E.D. 

THE  FACTORING  ALGORITHM  FOR  COMPUTING  SYSTEM  RELIABILITY. 

1.  Perform  all  possible  series-parallel  replacements  so  that  the 
system  is  s-p  complex; 

2.  Choose  a  component  e  such  that  both  [C,P+e]  and  [C,P_g] 
are  coherent  (this  can  always  be  done  for  coherent  s-p  complex  systems); 

3.  Again  perform  all  possible  series-parallel  replacements; 

4.  Repeat  this  procedure  until  the  system  is  reduced  to  a  single 
component. 

THEOREM  3.5.  If  a  coherent  system  is  totally  amenable,  then  the 
Factoring  Algorithm  requires  exactly  D(P)  -  1  pivots.  Any  other 
strategy  for  choosing  components  to  pivot  on  would  require  at  least  as 
many  pivots. 

Proof  [See  Satyarayana  and  Chang  (1983)].  For  totally  amenable 


coherent  systems 


by  (2.2).  Since  we  can  always  choose  e  so  that 

D(P+e)  >  0  and  D(P_e)  >  0 

after  all  possible  series-parallel  replacements  have  been  performed,  the 
number  of  leaves  in  the  corresponding  binary  computational  tree  is 
D(P).  The  number  of  nodes  in  the  binary  computational  tree  is  2D(P)  -1 
and  the  total  number  of  pivots  is  D(P)  -  1  since  the  D(P)  leaves 
of  the  binary  computational  tree  are  series-parallel  systems  with 
domination  one.  Q.E.D. 

If,  after  all  possible  series-parallel  replacements,  a  totally 
amenable  coherent  system  has  a  modular  representation 

0(x)  -  ( x) , . • . »Xp(x) ] 

then  by  (3.1)  the  factoring  algorithm  will  require 

0(0)  -  1  =  DU)  n  D(Xi)  -  1  (3.2) 

j=i  3 

pivots.  However,  if  we  first  use  the  factoring  algorithm  to  compute 
the  modular  reliabilities  and  then  the  system  reliability,  the  minimum 
total  number  of  pivots  required,  namely 

[D($)-l]  +  l  [D(Xi)-l] 

will  be  much  less,  in  general,  than  (3.2). 

Notice  that  were  Xj  series-parallel  then  [D(xj)-1]  *  0  and 
pivoting  on  components  in  a  series-parallel  system  would  be  wasteful 
in  time  and  effort. 


k-OUT-OF-n  SYSTEMS.  Although  k-out-of-n  systems  are  totally  amenable, 
the  factoring  algorithm  is  a  very  poor  algorithm  for  this  system. 

Suppose  components  fail  independently  of  one  another  and  component  i 

has  reliability  p.,  i  *  1 . n.  In  this  case  a  well  known  algorithm 

based  on  generating  functions  is  available.  The  computational  running 
time  of  program  2  in  Barlow  and  Heidtmann  (1985)  is  k(n-k+l)  <  n  /4. 

The  signed  domination  for  k-out-of-n  systems  is 

d(p)  =  (-n(k+n)[u:] 

and 

D{P) 

so  that  the  factoring  algorithm  can  be  very  bad  in  this  case.  Program  1 

in  Barlow  and  Heidtmann  (1985)  computes  exact  k-out-of-n  reliability. 

2 

The  running  time  in  this  case  is  of  the  order  n  /2. 

FINAL  REMARKS.  For  logic  trees  without  NOT  gates  an  algorithm  based  on 
pivoting  and  modular  reduction  can  be  devised.  For  totally  amenable 
systems  (with  the  exception  of  k-out-of-n  systems)  it  should  be  far 
superior  to  current  methodology. 
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